designate ALL = (root) NOPASSWD: /usr/sbin/rndc
designate ALL = (root) NOPASSWD: /usr/bin/designate-rootwrap
